Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 16:58:49.125 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53196 10 6452 1 2025-11-27 16:58:55.512 00:00:10.365 TCP 23.104.0.1:55268 -> 1.101.0.1:3000 11 1507 1 2025-11-27 16:59:49.344 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40778 10 6452 1 2025-11-27 16:59:55.921 00:00:10.396 TCP 23.104.0.1:53658 -> 1.101.0.1:3000 11 1507 1 2025-11-27 16:56:04.575 00:05:04.514 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 16:56:04.579 00:05:04.508 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 17:00:49.563 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51226 10 6452 1 2025-11-27 17:00:56.350 00:00:10.369 TCP 23.104.0.1:51172 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:01:49.775 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50328 10 6452 1 2025-11-27 17:01:56.762 00:00:10.377 TCP 23.104.0.1:45354 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:02:49.946 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:32798 10 6452 1 2025-11-27 17:02:57.179 00:00:10.364 TCP 23.104.0.1:34638 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:03:46.713 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 17:03:46.563 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 17:03:50.176 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44860 10 6452 1 2025-11-27 17:03:57.588 00:00:10.368 TCP 23.104.0.1:48010 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:04:50.390 00:00:10.653 TCP 1.101.0.1:3000 -> 22.102.0.1:46160 10 6452 1 2025-11-27 17:04:57.997 00:00:10.369 TCP 23.104.0.1:33014 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:05:51.086 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51654 10 6452 1 2025-11-27 17:02:04.578 00:05:04.513 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 17:05:58.405 00:00:10.320 TCP 23.104.0.1:36954 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:02:04.581 00:05:04.509 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 17:06:51.256 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38728 10 6452 1 2025-11-27 17:06:58.762 00:00:10.382 TCP 23.104.0.1:46284 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:07:51.478 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60350 10 6452 1 2025-11-27 17:07:59.181 00:00:10.365 TCP 23.104.0.1:39952 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:08:46.544 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 17:08:46.474 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 17:08:51.693 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46518 10 6452 1 2025-11-27 17:08:59.582 00:00:10.325 TCP 23.104.0.1:59296 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:09:51.912 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:38964 10 6452 1 2025-11-27 17:09:59.940 00:00:10.376 TCP 23.104.0.1:47144 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:10:52.101 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58384 10 6452 1 2025-11-27 17:11:00.354 00:00:10.365 TCP 23.104.0.1:56986 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:11:52.314 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46918 10 6452 1 2025-11-27 17:08:04.581 00:05:04.509 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 17:12:00.757 00:00:10.373 TCP 23.104.0.1:57284 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:08:04.578 00:05:04.515 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 17:12:52.533 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33550 10 6452 1 2025-11-27 17:13:01.166 00:00:10.338 TCP 23.104.0.1:47658 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:13:46.571 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 17:13:46.673 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 17:13:52.753 00:00:10.863 TCP 1.101.0.1:3000 -> 22.102.0.1:56186 10 6452 1 2025-11-27 17:14:01.546 00:00:10.423 TCP 23.104.0.1:48038 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:14:53.653 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38218 10 6452 1 2025-11-27 17:15:02.010 00:00:10.358 TCP 23.104.0.1:44800 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:15:53.821 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35458 10 6452 1 2025-11-27 17:16:02.404 00:00:10.327 TCP 23.104.0.1:51440 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:16:54.018 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:35504 12 10375 1 2025-11-27 17:17:02.767 00:00:10.454 TCP 23.104.0.1:43240 -> 1.101.0.1:3000 15 1926 1 2025-11-27 17:17:54.268 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:44726 11 6504 1 2025-11-27 17:14:04.580 00:05:04.514 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 17:14:04.581 00:05:04.510 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 17:18:03.262 00:00:10.365 TCP 23.104.0.1:49078 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:18:46.727 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 17:18:46.629 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 17:18:54.531 00:00:10.750 TCP 1.101.0.1:3000 -> 22.102.0.1:45888 10 6452 1 2025-11-27 17:19:03.665 00:00:10.366 TCP 23.104.0.1:54030 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:19:55.320 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34416 10 6452 1 2025-11-27 17:20:04.103 00:00:10.320 TCP 23.104.0.1:48814 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:20:55.494 00:00:10.378 TCP 1.101.0.1:3000 -> 22.102.0.1:36928 10 6452 1 2025-11-27 17:21:04.464 00:00:10.364 TCP 23.104.0.1:38920 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:21:55.916 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57556 10 6452 1 2025-11-27 17:22:04.877 00:00:10.371 TCP 23.104.0.1:33590 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:22:56.126 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53880 10 6452 1 2025-11-27 17:23:05.295 00:00:10.362 TCP 23.104.0.1:33052 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:23:46.887 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 17:23:46.944 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 17:23:56.332 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55214 10 6452 1 2025-11-27 17:20:04.583 00:05:04.509 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 17:20:04.580 00:05:04.514 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 17:24:05.698 00:00:10.368 TCP 23.104.0.1:39906 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:24:56.544 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:58386 10 6452 1 2025-11-27 17:25:06.109 00:00:10.362 TCP 23.104.0.1:38566 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:25:56.746 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56382 10 6452 1 2025-11-27 17:26:06.517 00:00:10.361 TCP 23.104.0.1:40408 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:26:56.962 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50746 12 6556 1 2025-11-27 17:27:06.918 00:00:10.337 TCP 23.104.0.1:58592 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:27:57.191 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53230 10 6452 1 2025-11-27 17:28:07.296 00:00:11.595 TCP 23.104.0.1:42098 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:28:46.878 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 17:28:47.127 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 17:28:57.371 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39074 10 6452 1 2025-11-27 17:29:08.928 00:00:10.385 TCP 23.104.0.1:45976 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:26:04.584 00:05:04.510 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 17:29:57.580 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:54668 10 6452 1 2025-11-27 17:26:04.581 00:05:04.515 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 17:30:09.365 00:00:10.365 TCP 23.104.0.1:54344 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:30:57.747 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38878 10 6452 1 2025-11-27 17:31:09.770 00:00:10.379 TCP 23.104.0.1:60052 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:31:57.964 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:33158 10 6452 1 2025-11-27 17:32:10.185 00:00:10.326 TCP 23.104.0.1:54450 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:32:58.157 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60096 10 6452 1 2025-11-27 17:33:10.546 00:00:10.366 TCP 23.104.0.1:59276 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:33:46.896 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 17:33:47.076 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 17:33:58.370 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45126 10 6452 1 2025-11-27 17:34:10.954 00:00:10.368 TCP 23.104.0.1:38208 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:34:58.545 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42080 10 6452 1 2025-11-27 17:35:11.362 00:00:10.324 TCP 23.104.0.1:47262 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:32:04.587 00:05:04.507 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 17:35:58.758 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47308 10 6452 1 2025-11-27 17:32:04.584 00:05:04.512 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 17:36:11.724 00:00:10.326 TCP 23.104.0.1:35558 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:36:58.974 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:36872 10 6452 1 2025-11-27 17:37:12.111 00:00:10.331 TCP 23.104.0.1:49774 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:37:59.217 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41892 10 6452 1 2025-11-27 17:38:12.482 00:00:10.366 TCP 23.104.0.1:39674 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:38:47.049 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 17:38:46.988 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 17:38:59.388 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40784 10 6452 1 2025-11-27 17:39:12.894 00:00:10.595 TCP 23.104.0.1:59866 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:39:59.562 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51606 10 6452 1 2025-11-27 17:40:13.530 00:00:10.361 TCP 23.104.0.1:43872 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:40:59.733 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49724 10 6452 1 2025-11-27 17:41:13.939 00:00:10.325 TCP 23.104.0.1:34176 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:41:59.910 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60888 10 6452 1 2025-11-27 17:38:04.586 00:05:04.512 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 17:38:04.588 00:05:04.507 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 17:42:14.305 00:00:10.319 TCP 23.104.0.1:54210 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:43:00.120 00:00:10.853 TCP 1.101.0.1:3000 -> 22.102.0.1:41704 10 6452 1 2025-11-27 17:43:14.664 00:00:10.359 TCP 23.104.0.1:49808 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:43:47.165 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 17:43:47.031 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 17:44:01.012 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60668 10 6452 1 2025-11-27 17:44:15.076 00:00:10.365 TCP 23.104.0.1:57792 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:45:01.226 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60658 10 6452 1 2025-11-27 17:45:15.479 00:00:10.329 TCP 23.104.0.1:56088 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:46:01.440 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52290 10 6452 1 2025-11-27 17:46:15.845 00:00:10.385 TCP 23.104.0.1:43180 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:47:01.618 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34166 10 6452 1 2025-11-27 17:47:16.271 00:00:10.365 TCP 23.104.0.1:43346 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:44:04.588 00:05:04.512 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 17:44:04.589 00:05:04.508 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 17:48:01.837 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49944 10 6452 1 2025-11-27 17:48:16.684 00:00:10.370 TCP 23.104.0.1:49260 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:48:47.404 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 17:48:47.391 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 17:49:02.065 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59704 10 6452 1 2025-11-27 17:49:17.110 00:00:10.364 TCP 23.104.0.1:54012 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:50:02.287 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46456 10 6452 1 2025-11-27 17:50:17.516 00:00:10.363 TCP 23.104.0.1:44314 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:51:02.499 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:46194 10 6452 1 2025-11-27 17:51:17.918 00:00:10.373 TCP 23.104.0.1:35498 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:52:02.676 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35280 10 6452 1 2025-11-27 17:52:18.329 00:00:10.367 TCP 23.104.0.1:44900 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:53:02.888 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50702 10 6452 1 2025-11-27 17:53:18.732 00:00:10.980 TCP 23.104.0.1:42916 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:53:47.630 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 17:53:47.593 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 17:50:04.588 00:05:04.513 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 17:50:04.590 00:05:04.509 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 17:54:03.110 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55816 10 6452 1 2025-11-27 17:54:19.754 00:00:10.387 TCP 23.104.0.1:53714 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:55:03.318 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55966 10 6452 1 2025-11-27 17:55:20.180 00:00:10.369 TCP 23.104.0.1:33138 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:56:03.489 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57878 10 6452 1 2025-11-27 17:56:20.583 00:00:10.363 TCP 23.104.0.1:45524 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:57:03.703 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:58206 10 6452 1 2025-11-27 17:57:20.991 00:00:10.323 TCP 23.104.0.1:46286 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:58:03.891 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36424 10 6452 1 2025-11-27 17:58:21.353 00:00:10.362 TCP 23.104.0.1:41038 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:58:47.302 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 17:58:47.148 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 164, total bytes: 502846, total packets: 1581, avg bps: 1069, avg pps: 0, avg bpp: 318 Time window: 2025-11-27 16:56:04 - 2025-11-27 17:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0040s User: 0.0020s Wall: 0.0020s flows/second: 81791.4 Runtime: 0.0020s